@misc{1195481, author = {R Ross and L A Johnson and S Katzke and P Toth and G Stoneburner and G Rogers}, title = {Guide for assessing the security controls in federal information systems and organizations ::building effective security assessment plans}, year = {2008}, month = {2008-01-01 05:01:00}, publisher = {, National Institute of Standards and Technology, Gaithersburg, MD}, doi = {https://doi.org/10.6028/NIST.SP.800-53a}, language = {en}, }